Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/r8FWTieBPHLRiTwj03lk8c1KhBo.roa
File: r8FWTieBPHLRiTwj03lk8c1KhBo.roa (raw, json)
Hash identifier: 53lOJElfSgVxyz3zX49GYG+l3DnwqA5qNEQibjWXdV4=
Subject key identifier: AF:C1:56:4E:27:81:3C:72:D1:89:3C:23:D3:79:64:F1:CD:4A:84:1A
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCA87325DAECEEF51E4A5D2C14D4F2
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/r8FWTieBPHLRiTwj03lk8c1KhBo.roa
Signing time: Thu 02 Jan 2025 07:48:22 +0000
ROA not before: Thu 02 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28893
IP address blocks: 77.79.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a8:73:25:da:ec:ee:f5:1e:4a:5d:2c:14:d4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afc1564e27813c72d1893c23d37964f1cd4a841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:72:63:b9:33:85:a8:5a:18:dd:6f:a0:e7:
f3:cd:1c:f5:c3:39:29:c3:fd:46:66:7f:41:15:6c:
13:a2:a4:64:b5:54:c5:85:43:54:e3:55:28:89:8b:
f4:8b:64:35:ba:e4:d4:8d:49:1f:99:bf:80:10:65:
9a:ad:6f:24:b7:ab:e9:ec:04:7e:24:65:18:5e:a9:
ca:bd:3d:a2:1f:ac:ba:a0:cd:d0:5f:d4:7a:9c:bb:
52:02:1a:4b:0d:5b:bd:a8:b7:11:da:19:6a:ce:e3:
29:3f:bc:72:df:d3:2a:a2:b1:7d:e3:a4:8f:5e:18:
9b:5a:ef:fe:74:7b:85:c3:e4:c1:0e:e3:63:ba:db:
59:7c:a7:2c:5f:68:b2:8b:99:57:f9:fd:39:a3:fc:
f7:1f:34:95:68:f8:0d:a7:68:cd:83:22:92:82:21:
d7:dc:a7:05:d8:06:87:89:34:82:24:44:0c:3a:c6:
a6:a6:61:22:7b:e1:5f:1b:64:5e:28:65:1f:a6:39:
6b:02:3e:5b:a2:d0:36:ba:8a:6a:1e:d7:93:bd:25:
25:95:5d:ef:08:39:36:c4:9a:c2:7d:75:7a:4a:80:
77:ce:da:c8:b4:32:8d:a8:da:03:8d:8e:6a:4d:9d:
15:2d:71:43:4b:ae:58:49:ec:8b:9c:91:88:83:64:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:56:4E:27:81:3C:72:D1:89:3C:23:D3:79:64:F1:CD:4A:84:1A
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/r8FWTieBPHLRiTwj03lk8c1KhBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.226.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fc:f4:50:c8:6f:62:89:1f:c1:e6:ac:95:d5:b9:05:55:2a:
e7:ec:4a:f3:13:4d:69:b2:f7:4b:1f:53:8e:ab:5b:b0:8d:a5:
0a:75:8a:6a:e7:50:fa:5c:28:fe:01:b6:44:18:bc:90:b1:99:
4b:12:a7:65:7d:c9:83:e8:bd:e4:f1:be:66:e8:7f:4c:8e:3e:
f1:5a:0e:2b:b9:ee:21:8b:47:d4:6c:a3:87:4e:ca:b2:7c:a7:
43:a6:77:6d:b8:a3:4a:c0:f1:19:52:a0:87:c4:6b:de:f3:78:
ff:a1:2c:92:5e:ed:a9:f6:08:d5:ac:25:95:2c:7d:9d:19:10:
33:58:d9:95:45:61:4b:9f:a0:8d:0d:af:d4:0d:65:c3:85:61:
2b:39:78:2e:50:2c:df:0d:56:01:e7:ca:42:87:43:bd:45:42:
e8:be:da:c9:d6:02:11:15:60:bb:7c:19:ea:07:4f:04:07:29:
1f:32:e4:8f:0f:80:0b:e4:e0:b5:d2:b2:94:3a:a3:31:96:52:
68:de:b0:ea:48:5b:33:6f:f4:38:00:aa:8c:a5:8f:ae:f2:12:
3f:6c:05:39:99:f8:98:d6:52:e9:d1:f7:0e:74:ff:19:27:a5:
73:ec:a8:b5:c1:51:b9:11:d8:70:12:49:4a:4d:9e:a4:6e:df:
65:6e:08:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/KhzJdrs7vUeSl0sFNTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjUwMTAyMDc0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmMxNTY0ZTI3ODEzYzcyZDE4OTNjMjNkMzc5NjRmMWNkNGE4NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZhyY7kzhahaGN1voOfzzRz1wzkp
w/1GZn9BFWwToqRktVTFhUNU41UoiYv0i2Q1uuTUjUkfmb+AEGWarW8kt6vp7AR+
JGUYXqnKvT2iH6y6oM3QX9R6nLtSAhpLDVu9qLcR2hlqzuMpP7xy39MqorF946SP
XhibWu/+dHuFw+TBDuNjuttZfKcsX2iyi5lX+f05o/z3HzSVaPgNp2jNgyKSgiHX
3KcF2AaHiTSCJEQMOsampmEie+FfG2ReKGUfpjlrAj5botA2uopqHteTvSUllV3v
CDk2xJrCfXV6SoB3ztrItDKNqNoDjY5qTZ0VLXFDS65YSeyLnJGIg2SQpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/BVk4ngTxy0Yk8I9N5ZPHNSoQaMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvcjhGV1RpZUJQSExSaVR3ajAzbGs4YzFLaEJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATU/iMA0G
CSqGSIb3DQEBCwUAA4IBAQAF/PRQyG9iiR/B5qyV1bkFVSrn7ErzE01psvdLH1OO
q1uwjaUKdYpq51D6XCj+AbZEGLyQsZlLEqdlfcmD6L3k8b5m6H9Mjj7xWg4rue4h
i0fUbKOHTsqyfKdDpndtuKNKwPEZUqCHxGve83j/oSySXu2p9gjVrCWVLH2dGRAz
WNmVRWFLn6CNDa/UDWXDhWErOXguUCzfDVYB58pCh0O9RULovtrJ1gIRFWC7fBnq
B08EBykfMuSPD4AL5OC10rKUOqMxllJo3rDqSFszb/Q4AKqMpY+u8hI/bAU5mfiY
1lLp0fcOdP8ZJ6Vz7Ki1wVG5EdhwEklKTZ6kbt9lbgjn
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:53 2025 by rpki-client